Open-source alternatives to Openhaystack

This project serves as a comprehensive technical reference and educational platform for the Ethereum ecosystem. It provides a deep dive into the fundamental architecture of decentralized ledger systems, covering the core mechanisms that enable trustless state transitions, cryptographic security, and network consensus. The documentation distinguishes itself by bridging high-level conceptual frameworks with practical implementation details. It details the lifecycle of smart contract development, from source code compilation and bytecode analysis to deployment and interaction patterns. Furthermo

OpenKeychain is a mobile OpenPGP key manager and identity provider used for storing, importing, and organizing encryption keys and digital certificates. It serves as an end-to-end encryption client and digital signature tool for encrypting and decrypting text and files. The application functions as a central vault that provides encryption and decryption services to third-party apps, such as email clients and password managers. It enables secure public key exchange through online directory retrieval and QR code scanning. The project covers cryptographic identity verification, including the ab

Anoma is a distributed operating system designed to abstract the complexities of blockchain networks into a unified interface for cross-chain coordination. At its core, the platform utilizes a resource-based state machine and an intent-centric execution model, where user-defined goals are processed and settled by decentralized solvers rather than through direct, manual execution. This architecture enables the creation of applications that operate across heterogeneous distributed networks while maintaining a consistent developer and user experience. The platform distinguishes itself through a

This project is an indoor location tracking server and wireless fingerprinting engine designed to calculate the physical position of Wi-Fi enabled devices within a building. It functions as a local positioning framework that maps wireless signal strengths to physical space without the need for dedicated hardware beacons. The system utilizes a training process to collect and submit wireless signal data, establishing a baseline database of signal patterns for specific coordinates. It identifies current locations by matching real-time signals against these stored fingerprints using k-nearest nei

Stellar Core is the primary software implementation of the Stellar blockchain network, serving as a distributed ledger and a Federated Byzantine Agreement system. It functions as a core node that maintains the shared state of the network and provides a runtime environment for executing WebAssembly smart contracts. The project enables the creation and management of digital assets, including the implementation of decentralized exchanges through distributed orderbooks and automated liquidity pools. It facilitates cross-border payment settlement by routing assets via path payments and bridging di

This project is an Ethereum wallet browser extension that serves as a blockchain identity manager and a bridge between decentralized applications and the Ethereum blockchain. It functions as a multi-network blockchain wallet, allowing users to manage digital keys and interact with various Ethereum-compatible network ecosystems. The software provides a provider interface for signing transactions and reading chain data. It enables users to switch between different blockchain networks and maintain secure identities to authenticate on decentralized networks. The system covers the management of w

This project is a collection of blockchain tools providing an Ethereum client node, a virtual machine runtime for smart contract execution, a blockchain wallet manager, and a programmatic network interface. It implements the necessary components to synchronize blockchain state, validate blocks, and process transactions on the Ethereum network. The software includes a dedicated command line interface for managing node operations and monitoring network status. It features a comprehensive suite of cryptographic utilities for generating account keypairs, managing encrypted secret stores, and sign

qTox is a decentralized instant messaging application and a Tox protocol chat client. It provides a cross-platform graphical user interface for encrypted text, voice, and video communication. The project enables peer-to-peer encrypted messaging and secure VoIP communication without relying on central servers or third-party intermediaries. It utilizes the Tox protocol to facilitate direct voice and video calling and peer-to-peer file exchange. Identity and network management are handled through decentralized identity mapping and a distributed hash table for peer discovery and routing. All dat

Naivechain is an educational blockchain implementation designed to demonstrate the fundamentals of distributed ledgers. It functions as a proof-of-work blockchain where nodes solve computational puzzles to validate new blocks and secure the network. The system operates as a peer-to-peer network using WebSockets to propagate transactions and synchronize state across nodes. It includes an asymmetric key wallet for generating public and private key pairs, enabling users to sign transactions and manage digital identities. Node administration and ledger data retrieval are handled through an HTTP

Tile38 is an in-memory geospatial database that uses the Redis protocol for communication and query execution. It serves as a distributed spatial store for points and polygons, featuring high availability through leader-follower replication and disk-based persistence. The system includes a real-time geofencing engine that monitors virtual geographic boundaries and triggers webhooks when objects enter or exit specified areas. It further distinguishes itself with an embedded Lua scripting engine for server-side data transformations and a built-in vector tile server for efficient map visualizati

jsencrypt is a JavaScript library for performing RSA encryption, decryption, and key generation. It functions as an asymmetric key generator and digital signature provider that executes all cryptographic processing directly in the browser. The library focuses on the use of the PEM standard for importing, exporting, and managing cryptographic keys. It provides the ability to create public and private RSA key pairs of various bit sizes and supports OpenSSL compatible formats. Its capabilities cover the transformation of plaintext into ciphertext and the recovery of original messages using corr

itpol is a framework for cryptographic key management, digital signature policies, and security hardening. It provides an IT policy template library and infrastructure access frameworks to establish organizational security guidelines and governance. The project focuses on cryptographic identity management through the use of PGP and SSH keys, alongside a security hardening guide for workstations. It defines standards for software supply chain security, specifically regarding the signing of code commits and software releases to ensure provenance. The system covers a broad range of security cap

This project provides a comprehensive guide and set of scripts for deploying and configuring a production-ready Kubernetes cluster from scratch. It centers on establishing a functional environment by installing core management components, storage, and networking across multiple nodes. The implementation emphasizes high availability for the control plane, utilizing layer-4 load balancing and leader election for the API server, scheduler, and controller manager. It further ensures reliability through the deployment of a distributed key-value store for persistent runtime data. The project cover

Berty is a peer-to-peer messaging application and framework designed for decentralized private messaging. It utilizes a distributed identity protocol and a decentralized database to enable end-to-end encrypted communication without relying on central servers, phone numbers, or email addresses. The project distinguishes itself through an offline messaging framework that uses Bluetooth Low Energy and multicast DNS for local device discovery. This allows peers to establish direct connections and exchange messages without internet or cellular data, using QR codes for secure contact exchange. The

Nostr is a decentralized social protocol and censorship-resistant messaging standard. It operates as a distributed event relay network where user identities are defined by public-key cryptography rather than centralized account databases. The protocol enables the exchange of cryptographically signed messages across a network of independent relays. This system allows for the broadcasting of signed notes to multiple servers to ensure content availability and permanence, while using public-key pairs to prove authorship and authenticity without a central registry. The system covers distributed c

Secretive is an SSH key manager that utilizes hardware-backed security modules to generate and store non-exportable private keys. It integrates with secure enclaves to ensure that sensitive cryptographic material remains within the hardware and cannot be exported from the device. The system implements a biometric authentication workflow, requiring fingerprint or wearable verification before a private key is released for signing operations. It also provides the ability to bridge signing requests to external hardware tokens for systems that lack a built-in secure enclave. The project includes

This project is an end-to-end encrypted communication client designed for secure messaging and identity management using public-key cryptography. It provides a cryptographic identity manager to verify authenticity across platforms and integrates a local messaging daemon to synchronize encrypted data and handle network communication. The system features a remote encrypted file system that mounts encrypted storage as local directories for direct file interaction. It also includes automated identity provisioning for registering and authenticating new devices and automation bots using cryptograph

Dawarich is a self-hosted location history manager and travel journaling platform. It functions as a personal travel archive that collects GPS coordinates and movement data, providing a private alternative to proprietary tracking services. The system utilizes a PostgreSQL geospatial database to store coordinates, visits, and custom geofence boundaries. The project distinguishes itself as a geospatial data converter and visualization tool, capable of transforming location history between formats such as GPX, KML, and GeoJSON. It allows users to organize GPS tracks and geotagged photos into nam

atproto is a decentralized social networking protocol implementation and a schema-driven API framework. It provides the networking and data standards required to build interoperable social networks where users control their own identity and data through a personal data server specification. The project distinguishes itself through a DID-based identity system for managing cryptographic keys and verifiable profiles, alongside a lexicon-based protocol definition that uses versioned schemas to ensure consistency across network services. It utilizes Merkle Search Trees for verifiable data storage,

Olares is a comprehensive suite of self-hosted identity, storage, AI, and orchestration services designed for private infrastructure management. It functions as a Kubernetes home server orchestrator, enabling the deployment of containerized applications, AI models, and GPU resources on local hardware to replace third-party cloud services. The platform distinguishes itself through a combination of self-hosted AI infrastructure for running large language models and image generators, alongside a decentralized identity manager that uses cryptographic keys and OIDC for trustless authentication. It

This project provides custom firmware and a suite of management tools for wireless thermometers and hygrometers. It replaces manufacturer software to improve measurement accuracy, extend battery life, and unlock configuration options not available in stock firmware. The system differentiates itself through a comprehensive set of administration utilities, including a device configurator for managing Bluetooth advertising and transmission power, and an over-the-air flasher for wireless software updates. It also features a climate data visualizer to retrieve and graph historical temperature, hum

ESP32-DIV is a handheld wireless pentesting platform designed for analyzing and disrupting a wide range of wireless protocols. It functions as a multi-band radio analyzer, RFID and NFC tag manipulator, and GPS wardriving logger, providing a unified interface for security auditing and signal research. The project distinguishes itself through a modular radio abstraction that allows switching between Wi-Fi, BLE, Sub-GHz, RFID/NFC, and infrared hardware modules. It features a touch-driven TFT interface for navigating toolsets and managing signal profiles, as well as the ability to emulate Bluetoo

ZeroNet is a decentralized web browser and server that enables the hosting and accessing of websites without central servers. It functions as a peer-to-peer content distribution network that utilizes BitTorrent and Bitcoin cryptography to replicate and share site data across a distributed network of users. The system emphasizes censorship-resistant publishing and privacy through the integration of hidden services to anonymize network traffic. Site identity and content updates are managed via a cryptographic system using public-key pairs instead of centralized account passwords. The platform

Kanidm is a centralized identity management server designed to handle authentication, authorization, and directory services across distributed infrastructure. It provides a comprehensive framework for managing human and service accounts, utilizing a schema-driven database to store identity records, group memberships, and system attributes. The platform supports a wide range of authentication methods, including passkeys, passwords, and standard protocols like OAuth2, OIDC, LDAP, and RADIUS. The system distinguishes itself through a granular access control engine that enforces security policies

This project provides a collection of practical implementations and code references for establishing secure network communications using transport layer security protocols. It serves as a guide for developers to implement public key infrastructure and enforce encryption standards within client and server applications. The repository focuses on cryptographic certificate management, including the generation of public and private key pairs and the creation of self-signed certificates for local testing environments. It covers the configuration of secure web servers, offering methods to harden ser

Gun is a decentralized graph database and synchronization engine designed for real-time, peer-to-peer data management. It functions as a JavaScript library that enables applications to maintain consistent state across distributed nodes without relying on a central server. By utilizing conflict-free replicated data types and a gossip protocol, the system ensures that data updates propagate across the network and reconcile automatically. The project distinguishes itself through a focus on decentralized identity and security, utilizing public-key infrastructure to authenticate users and sign dat

This project provides a standardized RESTful API for accessing comprehensive aerospace mission records and space exploration data. It serves as a structured interface for retrieving historical and upcoming launch details, hardware specifications, and media assets, while also providing real-time tracking for satellite orbital paths. The service distinguishes itself through a robust architecture designed for high-performance data retrieval. It utilizes in-memory response caching to reduce latency and server load, alongside query-parameter-based filtering that allows users to precisely control t